$ rpki-client -vvf rpki.apnic.net/member_repository/A91331AA/8AFBDB60C8EB11F086187B80C4F9AE02/3UhfmiMRbUEQwHvThx70phTsTSw.mft File: 3UhfmiMRbUEQwHvThx70phTsTSw.mft (raw, json) Hash identifier: ZOU8qoxQuNccN4pnOMsXXzoYIVzt77OvoMX8bTWIDl0= Subject key identifier: ED:0E:80:98:EA:6A:BC:B6:37:67:6A:99:D6:55:00:CD:47:2E:C8:16 Authority key identifier: DD:48:5F:9A:23:11:6D:41:10:C0:7B:D3:87:1E:F4:A6:14:EC:4D:2C Certificate issuer: /CN=A91331AA/serialNumber=DD485F9A23116D4110C07BD3871EF4A614EC4D2C Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UhfmiMRbUEQwHvThx70phTsTSw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91331AA/8AFBDB60C8EB11F086187B80C4F9AE02/3UhfmiMRbUEQwHvThx70phTsTSw.mft Manifest number: 59 Signing time: Mon 11 May 2026 08:16:59 +0000 Manifest this update: Mon 11 May 2026 08:16:59 +0000 Manifest next update: Mon 18 May 2026 08:16:59 +0000 Files and hashes: 1: 3UhfmiMRbUEQwHvThx70phTsTSw.crl (hash: 0e75R5fKIVT82NiqZej//yqmCT8o9/UwZxWfVJHhBSQ=) 2: DAC133B0C8EC11F08ED15548C4F9AE02.roa (hash: 1ew7qVLpB8TWdqlXh+YAjZXQOnaoMm4IqX92zh5/ghU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91331AA/8AFBDB60C8EB11F086187B80C4F9AE02/3UhfmiMRbUEQwHvThx70phTsTSw.crl rsync://rpki.apnic.net/member_repository/A91331AA/8AFBDB60C8EB11F086187B80C4F9AE02/3UhfmiMRbUEQwHvThx70phTsTSw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UhfmiMRbUEQwHvThx70phTsTSw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 08:16:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91331AA, serialNumber=DD485F9A23116D4110C07BD3871EF4A614EC4D2C Validity Not Before: May 11 08:16:59 2026 GMT Not After : May 18 08:16:59 2026 GMT Subject: CN=6a01907b-b44e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6e:83:0b:da:2d:0c:c3:9d:7b:25:84:42:56: 71:b8:69:16:8a:4f:cb:4f:8b:dc:69:ec:2d:12:ce: 72:5e:cc:29:cc:a2:9f:66:d4:95:52:71:df:33:93: 50:4e:f9:b0:d1:6b:7a:35:9a:5f:e2:f6:a1:7f:c2: 9a:3e:aa:a3:6c:53:d5:71:47:63:31:a2:15:e3:ef: 09:7c:84:66:6e:57:8a:87:62:d5:ed:4c:27:98:2c: 07:c4:c2:57:27:f4:1c:e0:1d:7d:63:66:24:d0:a2: 42:4e:24:8d:57:bb:33:4c:e3:5e:42:2a:63:7a:cc: 94:99:30:12:ac:c6:44:45:f0:c5:4d:22:18:51:68: 0e:a8:ab:80:12:78:29:6a:2a:37:f2:ae:b5:dc:d6: 18:4e:e8:7d:41:15:b5:2d:91:26:7a:e5:c1:87:72: 20:6a:8a:22:6b:21:34:cb:ef:97:c0:a5:60:7a:4d: 3d:33:c5:2a:2d:91:e2:6f:94:24:f9:14:81:09:b9: 6c:22:48:4d:93:1a:46:ea:a2:bf:f8:1a:42:cd:52: e1:11:2e:dd:44:fa:aa:e2:1a:2b:5d:3f:5d:01:6a: d2:9e:1d:38:54:88:e4:58:79:67:03:fb:03:a6:69: 92:c9:16:54:8b:9b:8f:df:dc:6f:af:04:76:90:31: b0:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:0E:80:98:EA:6A:BC:B6:37:67:6A:99:D6:55:00:CD:47:2E:C8:16 X509v3 Authority Key Identifier: keyid:DD:48:5F:9A:23:11:6D:41:10:C0:7B:D3:87:1E:F4:A6:14:EC:4D:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91331AA/8AFBDB60C8EB11F086187B80C4F9AE02/3UhfmiMRbUEQwHvThx70phTsTSw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UhfmiMRbUEQwHvThx70phTsTSw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91331AA/8AFBDB60C8EB11F086187B80C4F9AE02/3UhfmiMRbUEQwHvThx70phTsTSw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:df:f1:f4:22:87:94:fd:d8:0a:b6:c1:08:d6:aa:78:9b:5d: c3:64:6d:22:d8:7b:63:39:af:69:0f:00:b6:ff:d9:95:98:11: 72:1c:df:99:85:ee:84:9d:a9:2c:93:c2:5f:42:d5:e6:01:b0: a8:5d:65:7b:8c:51:61:65:8a:40:35:1f:c1:e9:20:fb:5f:bc: 8c:1b:e1:4f:41:6f:4e:95:e5:9f:eb:fd:1b:b2:14:ea:fd:3f: 5d:75:9a:3d:67:c7:0f:8f:77:94:22:f6:0e:89:78:89:b9:30: be:3b:ff:47:46:86:b3:61:1d:e5:60:3f:4f:16:e7:ea:e0:8a: 7b:2a:6e:c4:24:c2:d5:7f:56:c4:96:cb:df:c7:7a:80:76:45: 6c:03:b1:cb:67:08:57:b0:e3:d9:b7:84:7f:6a:e2:b4:6b:96: 65:75:77:f7:fa:4c:75:8c:85:66:0e:12:ff:2d:a7:0c:35:f0: 25:d2:c3:70:93:ab:21:70:ad:2d:a4:83:dd:85:4a:0b:f4:cd: bb:9b:80:7f:c8:51:80:63:37:85:fc:41:af:08:e9:a0:3f:e2: 0c:1d:de:18:c1:1a:e0:84:b7:37:26:d7:19:a3:5e:04:e1:36: cb:66:da:f4:0d:1c:f8:21:9b:33:7c:7a:02:a8:d9:5f:16:dc: 8d:18:17:6c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MzFBQTExMC8GA1UEBRMoREQ0ODVGOUEyMzExNkQ0MTEwQzA3QkQzODcxRUY0QTYx NEVDNEQyQzAeFw0yNjA1MTEwODE2NTlaFw0yNjA1MTgwODE2NTlaMBgxFjAUBgNV BAMTDTZhMDE5MDdiLWI0NGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7boML2i0Mw517JYRCVnG4aRaKT8tPi9xp7C0SznJezCnMop9m1JVScd8zk1BO +bDRa3o1ml/i9qF/wpo+qqNsU9VxR2MxohXj7wl8hGZuV4qHYtXtTCeYLAfEwlcn 9BzgHX1jZiTQokJOJI1XuzNM415CKmN6zJSZMBKsxkRF8MVNIhhRaA6oq4ASeClq KjfyrrXc1hhO6H1BFbUtkSZ65cGHciBqiiJrITTL75fApWB6TT0zxSotkeJvlCT5 FIEJuWwiSE2TGkbqor/4GkLNUuERLt1E+qriGitdP10BatKeHThUiORYeWcD+wOm aZLJFlSLm4/f3G+vBHaQMbDxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU7Q6AmOpq vLY3Z2qZ1lUAzUcuyBYwHwYDVR0jBBgwFoAU3UhfmiMRbUEQwHvThx70phTsTSww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMzMUFBLzhBRkJEQjYwQzhF QjExRjA4NjE4N0I4MEM0RjlBRTAyLzNVaGZtaU1SYlVFUXdIdlRoeDcwcGhUc1RT dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM1VoZm1pTVJiVUVRd0h2VGh4NzBwaFRzVFN3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMz MUFBLzhBRkJEQjYwQzhFQjExRjA4NjE4N0I4MEM0RjlBRTAyLzNVaGZtaU1SYlVF UXdIdlRoeDcwcGhUc1RTdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAN3/H0IoeU/dgKtsEI1qp4m13DZG0i2HtjOa9pDwC2/9mVmBFyHN+Zhe6Enaks k8JfQtXmAbCoXWV7jFFhZYpANR/B6SD7X7yMG+FPQW9OleWf6/0bshTq/T9ddZo9 Z8cPj3eUIvYOiXiJuTC+O/9HRoazYR3lYD9PFufq4Ip7Km7EJMLVf1bElsvfx3qA dkVsA7HLZwhXsOPZt4R/auK0a5ZldXf3+kx1jIVmDhL/LacMNfAl0sNwk6shcK0t pIPdhUoL9M27m4B/yFGAYzeF/EGvCOmgP+IMHd4YwRrghLc3JtcZo14E4TbLZtr0 DRz4IZszfHoCqNlfFtyNGBds -----END CERTIFICATE-----Generated at Tue May 12 23:23:41 2026 by rpki-client